I Saw a Phishing Site That Traps Security Bots

A phishing kit had a hidden form field with no visible counterpart. It wasn't part of the UI. The victim would never see it. So why was it there? Because it wasn't designed to catch victims. It was designed to catch us.